CVE-2024-52062CWE-120

Potential stack buffer write overflow in Connext applications while parsing malicious XML types document

Medium · published December 13, 2024

CVSS v4.0
6.9
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00167 · 5.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-12-13T10:20Z
EPSS history
Timeline
  • 13 DEC 10:20Z
    Potential stack buffer write overflow in Connext applications while parsing malicious XML types document
    cvelistv5